In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-livepatch-5.10.205-195.804Upgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools | Aug 28, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-headers | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-preempt-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub